maven-3.8
Chainguard
Status
Impact
The upstream maven-3.8.x branch requires changes to support commons-lang3 >= 3.18.0 in order to fix this CVE. See also: https://github.com/apache/maven/issues/10928 More information on the advisory: https://github.com/advisories/GHSA-j288-q9x7-2f5v
Status